CVE-2015-7033

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted document.

Score

CVSS 2.0 6.8 Medium

Status

Modified - product-security@apple.com

Published

2015-10-18

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Iwork (Apple)
• Keynote (Apple)
• Numbers (Apple)
• Pages (Apple)

References

• http://lists.apple.com/archives/security-announce/2015/Oct/msg00000.html
• http://www.securitytracker.com/id/1033823
• http://www.securitytracker.com/id/1033825
• http://www.securitytracker.com/id/1033826
• https://support.apple.com/HT205373